{"ip":"20.169.16.7","first_seen":"2026-08-23T01:31:23.799Z","last_seen":"2026-08-23T01:31:33.338Z","geo":{"country":"United States","country_code":"US","city":"Phoenix","asn":"AS8075 Microsoft Corporation","isp":"Microsoft Corporation","lat":33.448376,"lon":-112.074036},"stats":{"total_events":72,"ssh_events":0,"http_events":72,"ssh_failures":0,"http_4xx":72,"http_5xx":0,"distinct_usernames":0,"distinct_paths":72,"distinct_source_hosts":1},"behavior_tags":["cluster.shared_paths","probe.404flood"],"event_tags":["client.empty-ua","probe.config","probe.shell","protocol.no-accept","protocol.no-language"],"recent_events":[{"ts":"2026-08-23T01:31:33.338Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/encryption.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:33.204Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/checkinfo.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:33.069Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/qyffk.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.935Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/connection-test.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.799Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/acheckout.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.665Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"//p4.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.531Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/taff.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.396Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/oxse.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.262Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/akp.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:32.127Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/panelx.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.993Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/file2.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.857Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/doti.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.723Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/3.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.589Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/9.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.455Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/berlin.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.321Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/aafewc0k.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.187Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/acp.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:31.053Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/SDsadqwrf.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.918Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/phprelease.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.784Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/arig.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.65Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"//special.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.516Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/reop3.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.382Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/ecvvhlei.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.248Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/site2.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]},{"ts":"2026-08-23T01:31:30.114Z","source":"http","category":"request","severity":"warn","method":"GET","uri":"/gk.php","status":404,"host_app":"ec2-18-196-101-57.eu-central-1.compute.amazonaws.com","source_host":"aws-euc1","tags":["client.empty-ua","protocol.no-accept","protocol.no-language"]}],"generated_at":"2026-08-25T18:02:51.564370761Z"}